Process operation error monitor and error message system

ABSTRACT

There is here disclosed a method and apparatus for monitoring predetermined happenings, such as defined errors, which occur during the operation of a dynamic process, for example a metallic strip rolling mill. The dynamic process is sequentially operative in a chain of functional units, each of which includes a defined input event and at least one defined response event. In addition, there may be one or more defined input variables associated with that input event and one or more defined response variables associated with each of those response events. An error monitor operation is provided whereby operational checks are established for at least one of a maximum time interval Tmax and/or a minimum time interval Tmin for each response event, and a maximum amplitude Amax and/or a minimum amplitude Amin relative to each of the defined response variables. A software program is disclosed for operation with a general purpose digital computer to effect a special purpose control computer entity for the purpose of accomplishing the desired error monitor function as well as providing output indications and/or process operation corrections where some defined error condition is found to have occurred.

United States Patent Wallace et al.

Mar. 5, 1974 OTHER PUBLICATIONS Application of the Prodac 50 System to Direct Digital Control; by J. C. Belz, G. J. Kirk, and P. S. Radcliffe: 1965 IEEE Int]. Conv. Recl, Part 3,, pp. 102122, March 1965 Program Organization of a Process Comtrol Computer for Rolling Mill Applications; by J. S. Deliyannides, G. S. Rambo, and A. H. Green; 1965 lEEE 'lntl. Conv. Rec, Part 3, pp. 261265, March 1965 Primary Examiner-Eugene G. Botz Assistant Examiner-Edward ,1. Wise Attorney, Agent, or FirmF. H. Henson; R. G.

Brodahl [5 7 ABSTRACT There is here disclosed a method and apparatus for monitoring predetermined happenings, such as defined errors, which occur during the operation of a dynamic process, for example a metallic strip rolling mill. The dynamic process is sequentially operative in a chain of functional units, each of which includes a defined input event and at least one defined response event. ln addition, there may be one or more defined input variables associated with that input event and one or more defined response variables associated with each of those response events. An error monitor operation is provided whereby operational checks are established for at least one of a maximum time interval T and/or a minimum time interval T,,,,-, for each response event, and a maximum amplitude A and/or a minimum amplitude A,,,,,, relative to each of the defined response variables. A software program is disclosed for operation with a general purpose digital computer to effect a special purpose control computer entity for the purpose of accomplishing the desired error monitor function as well as providing outputindications and/or process operation corrections where some defined error condition is found to have occurred.

36 Claims, 17 Drawing Figures UNIT I UNIT um'r SCREW 5 POSITION. 3o REGULATOR l S2) 32 POSITION v DETECTOR l HMI\ HM2 HOT 1 HOT ,HM3' HM4 METAL METAL l METAL METAL DETECTOR DETECTOR 1 DETECTOR .DETECTOR l l WORKPIECE g 24 2'3 ooooooooo TABLE 2 ARITHMETIC PROCESS CONTROL coMPuTEn PATENTED 5W 3.795.916

SHEET 1 [1F 8 I UNIT UNIT UNIT SCREW 5. POSITION 3O REGULATOR Is POSITION '7 DETECTOR I HMI HOT HM2L HOT 1 HOT IIM3 HOT /HM4 METAL METAL METAL METAL DETECTOR DETECTOR I DETECTOR DETECTOR I I l l 26 WORKPIECE 24 28 O0 00000 0000000000 TABLEI I+ .I

LOAD CELL .8 I MEMORY I I2 I I4 r INPUT CONTROL VOUTPUT ARlTHMET'C l 12y PROCESS CONTROL COMPUTER HMI HOT HOT /HM2 METAL d METAL DETECTOR DETECTOR 24 WORKPIECE +v F 2 INvENTORs |TABLEI Frank E. Wallace 8 Anthony D. Deromo.

BY Z Z/Xi;

ATTORNEY PATENImm 3.795.915

SHEET 8 [1F 8 INPuT INPuT I REsPoNsE REsPoNsE FUNCT'ONAL EVENT vARIABLEs EvENTs vARIABLEs RuN IN TABLE I M l HM I NONE NoNE MILL LOAD CELL HM2 5| ATHMZ ON INTERRuPTIs, FORCE F| 2 POSITION DETECTOR 0N S ATHMZ ON INTERRuPT1s 52 AT 182 HM3 2 HM3 ON NONE RUN ouT TABLE 2 Hm 3 HM3 ON NONE HM4 ON NONE F|G.ll.

I CONTROL 5 uNIT I9 IZ$EEESET EXECUT'VET EXECUTIVE I l H T I INTERNAL |NTERRUpT EXECUTIVES II e E l I E a 1 23 l I IL APPLIcATIoN L INPuT- INPUT- CONTROL 1 OUTPUT OUTPUT PRoeRAMs EXEcuTIvEs HARDWARE PERIPHERAL PROCESS EQUIPMENT INTERRuPT ACTlVATlON--------- INFORMATION TRANSFER FIG.|2.

1 PROCESS OPERATION ERROR MONITOR AND ERROR MESSAGE SYSTEM BACKGROUND OF THE INVENTION The dynamic process operation can be separated into hardware and software portions. The extent of each portion is largely determined by the scope and sophistication of the hardware control equipment. The software is designed around this hardware in relation to these basic hardware functions and the overall process control requirements. In this software design, there are two basic approaches which are usually taken:

1. In the first approach, it can be assumed that the dynamic process is operating properly, and no consideration is made for error happenings. Each hardware event relates to the actual hardware process, such as a hot metal detector or workpiece sensor device, and has strictly specified properties. The signals for each hardware event are discrete signals, as normally though of because the computer works as a discrete time device, so the discrete pressductor ON signal would be one such output signal for the latter example. This prior art control design approach previously made no provision for dynamic process operation error, but just considered that each sequential happening occurred and there was no random error factor in the process operation. The end result was a dynamic process control that could function effectively only in an error free environment. One problem in first setting up the prior art process control apparatus was that when some operational error or malfunction occurred it was never really known what it was, hardware or software, and if the human operator would stop the dynamic process operation, he might never really know what had gone wrong. i

2. In the second approach, it was considered that a permissible error may not impair the operation of the dynamic process. An assumption is made that errors will occur, and an effort will then be made to correct whatever errors are identified and suitable recovery is provided for these errors. This could be very complex and expensive to program. For example, a slight percentage error in the amplitude of some output signal of 2 percent or evenS percent, or a small time delay in the occurrence of this signal, may not matter. But if the time delay is for one or more minutes, in certain cases it can cause the whole operational process to fail. If there are such cases, then software recovery can be designed to eliminate the effects of these errors in the dynamic process. But in cases like that, a horrible mess can be gotten into because of all possible error combinations that can occur, so in most cases this approach is not too practical.

Most successful digital computer controlled dynamic process installations have taken an approach midway between the above two approaches. Approach (1) is an error-free environment and approach (2) is with error including some effort made to compensate for that error. Approach (1) is not generally practical because the operational environment of a typical process operation can be extremely hostile to, the proper functioning of the control hardware; extremes of heat, pressure and humidity are common, such that errors of process operation will occur, and process control philosophy must take these error situations into account. On the other hand, approach (2) is not generally practical because of the extreme complexity of suitable recovery from errors in process operation control. In other words, an assumption is made that error will occur in the operation, and an attempt will be made through programming for desired recovery. For approach (2) the available mass memory can be filled up with all of the error happenings and still no reasonable determination is established about what corrections need to be made and in what order of importance.

A digital process control computer cna include a central integrated process control or setup processor operative with a software sequentially stepped instruction program which is entered into and stored within the storage memory unit of the computer, and including associated input and output equipment such as generally described in an article entitled Understanding Digital Computer Process Control by B. H. Murphy, which appeared in Automation for January 1965, pages 71 to 76, and in an article entitled Small Control Computers A new Concept by F. G. Willard which appeared in the Westinghouse Engineer for November 1964 at pages 174 to 179. Two other articles of interest here in regard to the programming of a process control computer should also be noted; one was published in the January 1965 Westinghouse Engineer at pages 13 to 19 to Paul E. Lego and the other was published in the 1966 Iron and Steel Engineer Year Book at pages 328 to 334 by J. S. Deliyannides and A. H. Green. Each computer processor is associated with predetermined input systems not specifically shown, which typically include an input system which scans process signals representing the status of various process operating conditions, a conventional analog input system which scans and converts process analog signals and operator controlled and other input devices and systems which could include paper tape, teletypewriter and dial input apparatus. Various kinds of information are entered into the computer control system through information input devices including for the example of a rolling mill, the desired strip delivery gage, grade of steel being rolled, any selected workpiece plasticity tables, hardware oriented programs and control programs for the programming system and so forth. The input system interfaces the computer control system with the process through the medium of measured or detected signals. To effect desired control actions, control devices are operated directly by means of output system or by means of analog signals derived from the output system through a digital to analog converter. One such control action outputs from the computer control system the stand screwdown positioning command signals which are applied to the respective screwdown positioning regulator for each stand or stands of a rolling mill to determine the operation of the screwdown motor for desired screw positional movement at each stand. The previously determined mill spring modulus for each stand is stored in memory along with the calculated values of delivery height, theoretical length, length correction, change in offset, the offset deviation and the various other determined values. The calculated offset signal is sent to the screwdown position regulator to correct for the positional error of the associated screw apparatus for each stand. A suitable output display can be provided for operation with the computer control system in order to keep the process operator generally informed about the process operation and in order to signal the operator regarding an event or condition relative to any particular stand which may require some action on his part.

The use of an on-line digital computer control system requires that one or more model equations relating to the controlled process be stored in the memory unit of the computer to enable predictive operation and con trol of the process and adaptive control of the process relative to updating information obtained from actual operation of the process. For the example of a rolling mill, to permit a prediction of each stand roll force, relative to a given workpiece having a known grade, a suitable model equation is used to predict the roll force for each stand, and in relation to the desired reduction to be made ineach stand, the unloaded roll opening is predicted for each stand. This general information is already known by persons skilled in this art and is covered by several publications; for example, in the Iron and Steel Engineering Yearbook for 1962 at pages 587 to 592 is an article by A. W. Smith and L. P. Gripp dealing with this subject matter, and two more articles of interest can be found in the Iron and Steel Engineering Yearbook for 1965 at pages 461 to 467 by R. G. Schultz and A. W. Smith and pages 468 to 475 by D. R. Jones and A. W. Smith. A further publication of interest here to illustrate the rolling mill computer control environment in which the teachings of the present invention could be utilized can be found in the Westinghouse Engineer for January 1969, pages 2 through 8 by John W/Wallace and is entitled Integrated Process Control Rolls Steel More Efficiently.

SUMMARY OF THE PRESENT INVENTION it is feasible to functionally specify any dynamic process, for example a metallic strip rolling mill controlled by a programmed digital computer control system, in relation to an input event in each of predetermined and defined functional areas or units and at least one output or response event from each such unit. A programmed digital computer control system can include a hardware portion and a software portion, which are operative in a chain of sequential events or functional units. For the purpose to establish and identify some operational unit failure, the combination of the dynamic process and the control system can be separated into a hardware and software functional unit; in general, for process control applications utilizing a general purpose digital computer, the hardware design is generally established in advance and is rather difficult to change, and for this reason it is easier to change the software instruction program operative with such a general purpose computer. By taking the hardware environment as it has been established and currently exists, an effort is made to see what can be done to minimize the adverse effects of any hardware failure; this is done by identifying any failure of functional happenings that can be reasonably specified, such as the fail ure of any happening that can be predetermined and defined as the response to a certain input event. These input events can be any signals that come in off the hardware or software interface, such as interrupt signals, force readings, analog signals, and any other desired signal that can be read from the external world by the digital computer or central processing unit, as well as any defined program operation. Each such input event determines a functional unit specification.

For the example of a heated workpiece moving under a hot metal detector and going into a rolling mill stand having a roll force pressductor, by advance determination of the functional unit input-output sequence, if the hot metal detector ahead of the mill stand provides an ON signal at a certain time, since the velocity of the workpiece moving toward the mill stand is known from the monitored table speed, the time of the subsequent pressductor ON signal can be predicted. This of course assumes that the workpiece stays on the mill table and no other such error occurs, and since the time note is made of when the hot metal detector ON interrupt signal occurred, if the pressductor ON interrupt signal does not occur within a certain established maximum time, an error situation is assumed to have occurred.

An overview can be taken of the entire dynamic process operation and considered as a defined sequential operating entity including an identified series of functional unit interacting blocks such that there can be specified the functional input and output signal properties of each such discrete unit, and an error monitor can be used to check each such functionally defined unit. This checking operation is undertaken in regard to predetermined characteristic operations of the monitored process, such as response variable amplitudes and response event time occurrences. One example would be to check for the maximum time of the occurrence of response events relative to each input event. For example, the input-output signal relationship for the previous example is the input event signal when the hot metal detector ON signal is provided, and the associated response event signal would be the pressductor ON signal. The error monitor operates to document the occurrence of every monitored error that occurs in the process operation and that can be defined in this way and possibly provides software recovery. When the hot metal detector provides an ON signal, the error monitor sends out a request for an error message to be displayed by some output device at an appropriate time if a pressductor ON signal error has not occurred by some future time. Such an error would not in fact occur until there was not received the associated pressductor ON signal within that established time interval. If this time interval is established to be A T, when the functional unit operates as desired regarding maximum time occurrence, one of these error alarm signals is requested for output after a time delay but not actually printed.

Every time a defined input event occurs for a specified functional unit, and if a maximum time check is to be made at least one appropriate error message is bid for to be output at some future time; and this future time is the time after which it has been established that a maximum time failure or error in operation has occurred in that particular functional unit. If A T is the maximum time interval established for the workpiece to go-from the hot metal detector to the pressductor, there is sent out an error message request at the occurrence of the input event hot metal detector ON signal and then after this predetermined time interval A T, a check is made to see if the response event pressductor ON signal has occurred. When the input event hot metal detector 0N signal occurs this bid or request is made for an error message to be output, and then the proper received response event signal within time interval A T stops this bid. When there is received the proper response event pressductor ON interrupt signal within time interval A T, this bid for an error message is cancellled, and no error message goes out.

' The error monitor operation provided here is operative such that each defined functional unit of the dynamic process can be specified in the relationship of at least one of a-maximum and/or a maximum time delay and a minimum and/or a maximum response variable amplitude signal. In other words, the software design proceeds on the basis of these discrete identified functional unit input event and related response event happenings. An assumption is made that when the initial input event signal occurs, the related response event signal or signals must occur in an established manner or the monitored process is not operating as desired. ln-accordanc'e with the teachings of the present invention each functional unit that is believed to warrant the effort is identified or defined as a discrete functional unit, and then a software error program monitors that each such defined functional unit operates as desired, and so forth. In this manner there is provided a way of monitoring the satisfactory operation of the whole dynamic process in relation to the operation of each identified functional unit. The error monitor program in this way follows the desired sequence of functional unit events and the values of associated response variables and establishes whenever a failure in one or more of them has occurred. Further, by the fact that the time of each event happening is monitored in relation to established time units and each variable in relation to established value limits, the associated output device such as a printer is able to provide printed engineering data and error alarms. In an effort to more or less monitor everything that is desired to be monitored, each discrete functional unit of the entire process has specified input-output signal properties, and if these properties are not followed within established bounds an error condition exists which could include hardware failure, software failure, maintenance failure, the human operator pulling some lever at a given time and so forth. The signals coming over the hardware interface as well as software generated signals, are the signals from the identified functional units.

Suppose after the provision of an input event signal, something fails in regard to the associated functional unit of the process operation, and there is not provided a related output response event signal. The requested or bid for maximum time error message would not be stopped by the desired occurrence of the response event signal within the established time interval. The maximum time error message would be printed to alarm the occurrence of the error condition.

The present invention includes the concept of identified discrete functional units in relation to input event happenings, and if the related functional unit response event happenings do not occur within the desired interval of time and the response variables are not within the desired range of magnitude, there is provided an alarm indication and/or process operation correction. For every functional unit defined in this manner at any given time, an error condition will be indicated.

The software can be designed to undertake a monitoring function relative to each input event over all desired response happenings associated with that input eventand compare them to idealized response happenings. When any operational error condition established by this comparison reaches a sufficient magnitude to exceed defined error limits, andappropriate error condition will be indicated and which elements in identified functional units are causing the error situation. A

software response, if feasible, and/or human response can then be made to correct the error conditions. This approach has several unique advantages:

1. It provides an improved monitor of every defined error condition such that it is better known and documented,

2. The source of hardware or software malfunction can be better determined from the error message and more readily corrected,

3. Confidence in computer operation is improved, since every unexpected defined error occurrence is explained, and

4. Process operational production losses are minimized, since defined error conditions can be better identified and corrected more quickly.

The present invention will become more apparent from the following exemplary embodiment detailed description in conjunction with the attached drawings.

BRIEF DESCRIPTION OF THE DRAWINGS FIG. I is a schematic showing of a dynamic process example of a single stand rolling mill operative with a programmed digital process control computer suitable for operation in accordance with the teachings of the present invention;

FIG. 2 illustrates a more simple example of a given functional unit including a workpiece moving along a roller table between two hot metal detector devices;

FIG. 3 illustrates a suitable input event logic flow chart program for operation with the process control computer shown in FIG. II, to effect a predetermined check for a maximum time T and a minimum time T relative to all the response events associated with a given input event I;

FIG. 4 illustrates a suitable logic flow chart program operative with the program of FIG. 3 for effecting a predetermined check for the maximum amplitude A relative to all response variables associated with the response events of a given input event I;

FIG. 5 illustrates a suitable flow chart program operative with the program of FIG. 3 and FIG. 4 for effecting a predetermined check for the minimum amplitude A relative to all response variables associated with the response events of a given input event I;

FIG. 6 illustrates a suitable logic flow chart program for operation with the process control computer shown in FIG. 1, to effect a predetermined operation relative to the occurrence. of each response event which occurs at time T and associated with a given input event I and a suitable logic program to check for A error relative to response variables for a given input event I;

FIG. 7 illustrates a suitable logic flow chart program operative with the program of FIG. 6 to check for any A error relative to response variables for a given input event I;

FIG. 8 illustrates a suitable logic flow chart program for checking a maximum time response error periodically as determined by a time pulse from a clock within the process control computer;

FIG. 9 illustrates a suitable logic flow chart program for outputting a desired error condition message upon the occurrence of a time pulse from a clock within the process control computer upon the determination that a monitored error condition has taken place;

FIGS. 10A, IOB, 10C, 10D, 10E and 10F illustrate the sequencing relationship between the error monitor program, such as shown in FIGS. 3, 4 and 5 for each defined input event and as shown in FIGS. 6 and 7 for each defined response event, and the calling application program for the example of FIG. 1 in response to functional unit input event signals;

FIG. 11 is a chart provided to illustrate for each defined functional unit the relationship between a given input event and associated input variables, response events and response variables for the example of FIG. 1; and,

FIG. 12 is an illustration of a typical prior art process control computer programming structure to show the interrelationship between hardware and software portions thereof.

SYMBOLS USED IN DESCRIPTION H response event identification number I input event identification number N(I) number of input variables associated with input event I R(l) number of response events for input event I IDV(I,J) identification number of input variable I for input event I where J l to N(I) IDR(I,A) identification number of response event A for input event I, [A= 1 to R(I)] NOR(I,B) number of response variables associated with response event B for input event I, [B l to R(I)] IDT(I,C,D identification number of associated response variable D for response event C for input event I T present time, [C =1 to R(I)]; [D =1 to NOR- N current number of input variables to beprocessed (used as index counter) R current number of response events to be processed (used as index counter) K temporary storage for response event identification number L temporary storage for error bit number M temporary storage for response variable identification number '0 temporary storage for current number of response variables to be processed X temporary counter used in time delay program T computer maximum time response T computed minimum time response A computed maximum amplitude AmIn computed minimum amplitude Y total number of error-message bits GENERAL STORAGE TABLES FOR INPUT EVENT I INPUT VARIABLE DATA Table A(l,l) (for input event I, first table) 1) N(I) number of input variables associated with input event I 2) IDV(I, l) identification number of lst input variable for input event I 3) IDV(I,2) identification number of 2nd input variable for input event I I+N(I)) IDV(I,N(I)) identification number of N(I)th input variable for input event I RESPONSE EVENT DATA Table A(I,2)

l) R(I) number of response events for inputevent I 2) IDR(I,1) identification number of lst response event for input event I 3) IDR(I,2) identification number of 2nd response event for input event I 1+R(I)) IDR(I,R(I)) identification number of R(I)th response event for input event I RESPONSE VARIABLE DATA Table A(I,3)

l) NOR(LI) number of response variables associated with response event 1 for input event I 2) IDT(I,1,I) identification number of lst associated variable of lst response event for input event I 3) -IDT(-I,l,2) identification number of 2nd associated variable of lst response event for input event I IDT(I,I,NOR(I,1),) identification number of NOR(I,1)th associated variable of lst response event for input event I Table (A(I,4)

I) NOR(I,2) number of response variables associated with response event 2 for input event I 2) IDT(I, 2,1) identification number of 1st asso ciated variable of 2nd response event for input event I I+NOR(I,2))

T( 2, O gL ,tidqntjftea ism. number. 9 NOR (I,2 )th associated variable of end response 'event for input event I Table A(I,R(I)+2) l) NOR(I,R(I)) number of response variables associated with response event R(I) for input event III DEFINITION OF A FUNCTIONAL UNIT A monitored process functional unit specifies a predictive relationship between a distinct input event, which occurs in the operation process along with the values of relevant measurable variables associated with this distinct input event and other subsequent and associated response events in the process operation and the values of measurable variables associated with these subsequent response events. An input event, in the example of FIG. 1, is the occurrence of an electrical signal at the interface between the control computer and its hardware data input devices, which cause the operation of an application software program specifically related to the unique nature of this electrical signal. When an input event occurs, then, the control computer has knowledge of the time of the occurrence of a distinctive hardware function related to that input event. For example, an input event is the triggering of a hardware interrupt caused by the passage of a hot metal workpiece under a hot metal detector.

The predictive relationship. specifically applies to the established minimum and/or maximum time durations between the time of the input event and subsequent as- I sociated response events necessary for the assumption of proper hardware function for those hardware elements specifically involved in determining the operational relationship among these associated events. This predictive relationship also applies to the established maximum and/or minimum amplitudes of variables associated with these subsequent response events, and

which are measured at the time of those subsequent response events, necessary for the assumption of proper functioning of the related hardware. 1

When a functional unit has been defined, then one input event only can occur at one time, and when the input event associated with this defined functional unit occurs, a prediction of maximum and/or minimum allowed times of occurrences of subsequent related response events could be made, and a prediction could be also made of the maximum and/or minimum allowed amplitudes or values of variables associated with these subsequent related response events. These predictions are made from mathematical relationship derived from observation and manual data as well as knowledge of mill system specification which enable the prediction to be made of the operation of hardware and software associated with a given functional unit. This hardware and software is assumed to have been designed to operate within predetermined design limits. The functional unit places error bounds on those aspects of operation which can be described in terms of input event and associated response events. These error bounds are-related to acquired knowledgeof these design limits. If the time of subsequent response events associated with an input event is outside the calculated time bound, an error condition is said to exist. If associated variables, such as roll force at next stand, position of workpiece, workpiece temperature and the like are outside the cal-' culated amplitude bounds, an error condition is also said to exist.

A functional unit may be defined among any hardware and software elements where a predictive relationship can be defined and the input and response events, and associated variables necessary to determine proper hardware and software functioning with respect to response timing and association variable values, are available in a measurable form. For example, there are certain hardware elements in a rolling mill where functional units can be defined in a straight forward and predicable manner. The following are examples of simple hardware units'vital to rolling mill control.

HARDWARE UNIT A. Position Function Regulators Design Response 1 Serewdown regulator HARDWARE'UNIT -Continucd movement; allowed positioning accuracy; Anticipate or zero error interrupt given when movement is complete maximum and minimum time for change of motor speed; allowed speed accuracy; anticipate or zero error interrupt given when movement is complete 2. Motor speed regulator change motor speed to reference value 3. Sideguide regulator move sideguides to desired setting time for sideguide movement; allowed positioning accuracy; anticipate or zero error interrupt given Pressductor ON interrupt given within maximum time of threshold force application; Pressductor OFF interrupt given within maximum time of threshold force release; force analog signal given to determined accuracy when force above threshold is applied Provides roll force and rolling time feedback B. Pressductor Unit Provides ON interrupt within maximum time of hot metal reaching detector; provides OFF 7 interrupt within maximum time of hot metal leaving detector.

C. Metal detector Provides position information of hot metal times; produces data in predetermined format with predetermined limits predetermined rolling information to and from computer tape reader; keyboard device 2. data link transfers rolling information to and from another computer or device provides data at defined times" provides data in predetermined format with predetermined limits maximum and minimum Functional units can be defined from these devices or a combination of these devices and predictive equations can be written to determine maximum and minimum bounds in response event timing and associated variable values, The exact nature of these equations would depend greatly upon the particular control applicationand the degree of error control being sought. The following examples illustrate some functional units which would ordinarily be used:

Unit Input Event input Variables Error-Checks (l T min and T max; (2) A min and A max Response Events Response Variables positioning command present speed; new

Speed regulator speed zero error or could be position; (2.) new screw anticipate interrupt to indicate zero error in l screw position (meas. to see how close to ref) (l) time of interrupt; (2) screw position accuracy sec.

zero error or anticipate interrupt motor speed (1) time of interrupt; (2)

speed accuracy Unit Input Event Input Variables Response Events Error Checks (I)T min and T max; (2) A min and A max I Response Variables metal detector B on and 8 same tables pressductor A and pressductor A ON or subsequent OFF interrupt A and B pressductor B on same mill GENERAL OPERATION OF ERROR MONITOR For each input event signal, one or more associated response event signals are monitored. These response event signals can be described in terms of at least established maximum and/or minimum limits relative to time and perhaps amplitude. The error monitor program includes equations for predicting, for each response event signal, at least one of T and T limits of time and A and A limits of amplitude. This can be done by looking at the process operational specifications and determining that each identified response event should have occurred within an established time interval defined by T and T and if it does not then provide an error output alarm. Or this can be done by observation of process manual operation, to establish for example, the velocity of metal passing-a given location at a given time and so forth, taking readings when input events to functional units of interest happen, and then utilize that operation as a model for comparison. From this, maximum and minimum time and amplitude error limits can be established, and the error monitor can check to see that these error limits are not exceeded. Where the automatic operation is substantially different from the manual or desired reference operation, proper adjustments of the process operation can be made.

All of the monitored error conditions are established from the time and amplitude response of the desired operation of each functional unit, and the intended operation of the error monitor rests on this premise. Relative to the making of a desired time check, at a certain time, T the error monitor detects an input event signal for a given functional unit, and the response event characteristic dictates that the response event signal to this input event signal should be received by a maximum time T plus AT, and if the response event signal has occurred within the latter time, this indicates proper time sequence operation of the process, provided the T limit is also satisfied. At input event signal occurrence time T the error monitor sends for the T error check a request for an error message at time (T plus AT), stating that the desired response event signal has not occurred. If the response event signal occurs in this time, the request for this error message is cancelled. If the response event signal does not occur in this time (T plus A T), then the operator is informed of the related error condition.

Relative to the making of an amplitude check for response event variable signals, the error monitor can additionally check the amplitude of the response event signal at the time of the response event against allowable limits. If the response event variable signal is not within these desired amplitude limits, an immediate request is made for an error message stating that there has been an amplitude limit error. This procedure is generally followed in relation to all established functional units having defined error bounds for response event variable signals relative to the operatior zero error or anticipate sideguide position interrupt table speeds between A hot metal detector B ON or OFF interrupt mill roll speeds between pressductor B ON or OFF interrupt (l) time of interrupt; (2) position accuracy (I) time of hot metal detector B interrupt ON or OFF none none (l) time of pressductor B interrupt ON or OFF A check could also be made for the minimum time error, when the response event signal has occurred. The failure of the hardware response event not occurring at all is more related to the making of a maximum time check,-but the more general concept would include a check of the minimum time here, since problems might be present regarding mill noise or mill chatter. For example, when the hot metal detector ON input signal occurs, the error monitor program can be established such that the pressductor ON signal should not occur before a certain minimum time interval,

. since it is known physically that the workpiece cannot reach the pressductor in less than a defined time period. So the minimum time delay check would be a check against noise, and the maxium time delay check would be a check against some failure in the system. For another example, an input event signal for a screwdown position regulator can be detected at time T to position the regulator to 500 mils i 10 mils, and an associated bid request for an error message screwdown position regulator XX failure, (where XX could relate to one of roll stand regulators l, 2, 3) is made for T plus A T see, where T is the maximum allowed time interval. If the zero error response event signal is received at time T T A T seconds, the request or bid for this error message is cancelled. The screwdown position is read at this time, and if it is 570 mils, an error message SCREWDOWN POSITION REGULA- TOR XX POSITION MALFUNCTION can be printed; on the other hand if it is 505 mils, no error message would be printed. If the zero error response event signal is not received before T AT seconds, the requested or bid for error message is printed. It can :be seen that there is here made a comparison of the response against certain predetermined time and/or amplitude limits. For each response event there is established in advance through the use of predictive equations the desired time and/or amplitude limits.

In general the error monitor program places strict bounds or limits on the time and/or amplitude characteristics of all defined functional units in the process operation. If these bounds are exceeded, the human in- 5 terface is informed of the existence of an error in the actual operation in relation to a predetermined desired operation and software recovery of the process operation from such error can be started if desired. For instance, a slab can be predicted to be at a certain metal detector HMl at time T and produce an interrupt at time T A T where AT is an arbitrary time interval constant. This prediction was made when it passed another metal detector at previous time T A T. At time To AT the request was made for the metal detector failure message at time T0+AT In this case the response event for metal detector HMl ON was made at time T A T. This in effect provides a prediction for this particular event in a given functional unit to happen. For another example, if a workpiece is movin g down a process line toward three hot metal detectors, when the first hot metal detector ON tain error conditions and calculate them at this time.

With knowledge of the arrival time of metal in a given mill stand, it is possible to predict the occurrence of related response events in a certain sequence and in established maximum time intervals. Consider the ordered set of selected events [E1, E2, on through EN], which occur to metal being rolled, and assume that it is feasible to predict the maximum times between each such ordered event, [T T T which latter time is the time between EN-l and EN. There can then be established the existence of a functional unit between neighboring members of the ordered event set. Each such functional unit can be represented and checked by the error monitor in accordance with the above principles of the present invention.

DESCRIPTION The operation of a simplified process, such as a single stand rolling mill shown in FIG. l and including a run in ta BLELAIB tlabl ALBLElL l stand including back-up rolls and work rolls 26 and 28, a plurality of hot metal detectors HMl, HM2, HM3 and HM4, a load cell 40 operative with the stand for sensing the roll separation force between the work rolls, a screw position detector 36 and a position regulator 34 for determining the opening or roll gap between the work rolls. A workpiece such as a hot slab 24 enters the process and the first hot metal detector I-IMl gives an interrupt ON signal to indicate the start of the process as shown in FIG. 1 and that the workpiece 24 has entfisdt r n intahlqs TABLE).- h n h w iss reaches the hot metal detector HM2, a position command signal and a position reference signal S, are sent to'the screwdown position regulator 34 such that the position regulator moves the screwdown motor 30 and the cooperative screw mechanism 32 to cause the work rolls 26 and 28 to achieve an unloaded roll opening position in accordance with the desired reference position. The position detector 36 generates a zero-error interrupt signal IS, when the desired roll position is reached and continuously generates an actual screw position signal S2 in accordance with the actual position of the screwdown apparatus. When the workpiece 24 enters the mill rolls of the mill stand the load cell 40 generates an interrupt signal 18 when the roll force rises above the threshold level, and the load cell thereafter continuously supplies the analog roll force signal F,. When the workpiece 24 has passed through the rolls 26 and 28 of the mill stand, the workpiece 24 exits from the mill standonto the run off tables TABLE 2 where the position of the workpiece 24 is sensed by the hot metal detector HM3 as the workpiece enters the run off table TABLE 2. The position of the workpiece is sent by the hot metal detector HM4 when the workpiece exits from the run off table TABLE 2.

The apparatus so far described can be divided into three functional units relative to the involved hardware as shown in FIG. 1.

Functional unit 1 includes the run in tables TABLE 1, the hot metal detector I-IMl and the hot metal detector HM2. The input event associated with this functional unit 1 would be the hot metal detector HMI on interrupt signal. The input variables would be none. It might be possible to operate the apparatus such that the hot metal detector HMl ON interrupt signal would be operative to initiate a control of the operating speed of the run in table TABLE 1, such that an input van} able could be the motor speed of the run in table run in table TABLE 1 is operating atdesiredreferegce speed, this input variable is not required. A response event for this unit ll would be the ON interrupt signal from the hot metal detector HM2 to indicate that the workpiece had completed its travel between the hot metal detector HM] and the hot metal detector HM2. A response variable for this unit 1 is none.

Functional unit 2 would include the hot metal detector HM2, the mill stand, the load cell 40 operative with the mill stand, the screw position detector 36 operative with the mill stand and the hot metal detector HM3. The input event would be the hot metal detector HM2 on interrupt signal. The input variables would be the screw position reference signal S, at the time the hot metal detector HM2 on interrupt signal is provided, and the actual feedback position signal S from the position detector 36 at the time the hot metal detector HM2 ON interrupt occurred. The response events for this unit 2 would be the interrupt signal 18 from the load cell 40 and the interrupt signal IS from the position detector 36 to indicate a zero-error condition, and the hot metal detector HM3 ON interrupt signal to indicate the head end of the workpiece had passed under the position of the hot metal detector HM3. The response variable would be the force feedback signal F from the load cell 40 when the interrupt signal I8 occurs, and the feedback signal S from the position detector when the screw zero error interrupt signal IS, from the position detector occurs. The response variable corresponding to the hot metal detector HM3 ON interrupt signal would be none.

Relative to functional unit 3, this would include the n pate zeslaBLe 2 th m metal s stss rfi and the hot metal detector HM4. The input event would be the hot metal detector HM3 on interrupt signal. The input variables would be none. The responsive event would be the hot metal detector HM4 ON interrupt signal. The response variables for unit 3 would be none.

It should be understood that the analog force reading signal P, from the load cell 40 is provided upon a threshold roll force in the order of /2 million pounds being realized. The signal I8 is the load cell threshold ON interrupt signal. The signal S, to the screw position regulator is the desired screw position reference from the central processing unit 10. The signal S2 from the screw position detector 36 is the actual screw position reading in accordance with the actual unloaded roll opening between the work rolls 26 and 28. The signal ISl from the screw position detector is the screw position zero-error ON interrupt signal.

For the case of the functional unit 1 above set forth, it is necessary to establish only the maximum and minimum time checks and these are determined by the following functional unit equations.

Maximum time check where F l is an empirically established function operator matrix, which function operator matrix establishes an arbitrary function with input variables Tover A, and T is the present time of day and the quantity A is an array of input variables in a one row and one column matrix.This can be resolved by persons skilled in this art to T T A Dl urin 2 l l which for this example can be resolved to T T A D2 where T is the minimum time for the HM2 ON interrupt signal to occur and A D2 is the pre-established error constant for this minimum time interval, for example 1 minute. It will be seen that the above two functional unit equations thereby establish the minimum and maximum time boundaries for the responsive HM2 ON interrupt signal to occur subsequent to the HM] ON interrupt input event.

The functional unit 3 is generally the same as the functional unit 1 in regard to the determination of a maximum and a minimum time check. The equation for determining the maximum time check for func:

tional unit 3 is T T A D3 where T is the minimum time for the HM4 ON interrupt signal to occur in response and subsequent to the HMS ON interrupt signal, and A D4 is the preestablished error constant for the minimum time interval for the occurrence of the HM4 ON interrupt signal in response to the earlier happening of the HMS ON interrupt signal when the workpiece movement between HMS and HM4 is in accordance with the generally es tablished and desired normal operation of the rolling mill.

The functional unit 2 requires the determination of maximum and minimum time checks as well as maximum and minimum amplitude checks for the process operation. The maximum time check for each of the three response events is determined by the formula relationships.

Tmax A where Tm, is the maximum time to receive the force interrupt signal 182, Tis the present time of occurrence of the HM2 ON interrupt signal and A D5 is the preestablished maximum time interval error constant for the [S ON interrupt signal response event. Tm, is the maximum time to receive the screw zero error interrupt signal 18 S is the actual screw position at the time of the HM2 ON interrupt signal, S isthe screw position reference provided at the time of the HM2 ON interrupt signal and A D6 is the pre-established maximum positioning time interval error constant. TMIa is the maximum time to receive the HMS ON interrupt signal after the occurrence of the HM2ON interrupt input event signal and AD7 is the pre-established maximum time interval error constant for the occurrence of the HMS ON interrupt signal.

The minimum time check equations are generally in accordance with the maximum time check equations and can be written out as follows:

Tmin A min T'l' lS Tmin A interrupt signal to occur. T equals the present time of the HM2 ON interrupt signal and A D8 is the preestablished minimum time interval error constant for the occurrence of the 182 ON interrupt signal. T equals the minimum time to receive the screw position zero error interrupt signal lS,. S is the actual screw position at the time of occurrence of the HM2 ON interrupt signal. S, is the screw position reference given at the time of the HM2 ON interrupt signal, and AD9 is the pre-established minimum positioning time interval error constant. T equals the minimum time to receive the. HMS ON interrupt signal, and A D10 is the pre-established minimum time interval error constant for the occurrence of the HMS ON interrupt signal.

The maximum amplitude check for the functional unit 2 is determined by the formula relationship S 8 ADl2 where F is the maximum force amplitude and Szmar is the maximum position amplitude. F is the maximum force reading at the occurrence of the [S ON interrupt signal and ADl l is the pre-established maximum allowed amplitude of the force signal F S is the maximum screw position of the occurrence of the IS, ON the interrupt signal, S is the screw position reference given at the occurrence of the HM2 ON interrupt signal and ADI2 is the pre-established maximum upper error limit on the screw position at the occurrence of the HM2 ON the interrupt signal.

The minimum amplitude check for the functional unit 3 is detemiined by the formula equations.

F A D13 S S AD14 F is the minimum force reading at the time of the IS: ON interrupt signal, and A D13 is the preestablished minimum allowed value of the analog force reading signal F S277); is the minimum screw position at the time of the occurrence of the [S ON interrupt signal, S, is the screw position reference sent at the time of the HM2 ON interrupt signal and A D14 is a pre-established maximum lower deviation of the screw position.

Thusly it can be seen that the actual screw position should be the desired reference position S plus or minus an upper and a lower error tolerance. Also it should be noted that model equations may be utilized to predict the reference roll force for the stand operation, and for the case of a tandem rolling mill schedule calculations for the workpiece passing through each of the stands or for a reversing mill the calculated force schedule for each pass of the workpiece through the same stand.

It should be noted that the above function operator matrix notation is a well known formalized way of expressing the evaluation of an arbitrary function whose independent variables are stored in T and A matrices. In the case of a linear relationship, the function operator matrix would reduce to multiplying factors. It is a formalized way of evaluating the predictive relationships involved, and it should be noted that in actual practice, the predictive equations may be stored in a different manner such as the here illustrated resolved equations. The operation of the error monitor here disclosed does not depend upon the utilization of such function operators, but instead the predictive equations may be stored in any suitable manner, such as adding to the present time T a pre-established desired time error constant interval for the next sequential event to occur, and some established amplitude range stored as an error constant.

FIG. 2 EXAMPLE In FIG. 2 there is shown an example of an illustrative Functional Unit, where V is the velocity of workpiece 24 as it passes metal detector HM2 HMl is hot metal detector 1 HM2 is hot metal detector 2 d is the distance betweem HMl and HM2 TABLE 1 is a table drive V is the tangential velocity of the table rolls. The input event is HMl ON signal which occurs upon HMl detecting the passage of hot metal 24 on table TABLE 1. There is a response event which is the HM2 ON signal, upon HM2 detecting the passage of hot metal 24. The tangential velocity V of table TABLE 1 is a response variable of workpiece 24 as it passes I-IM2. Assume there is a device at l-IM2 to measure the metal velocity V, when the I-IM2 ON signal response event occurs.

This typical functional unit can be expressed in the form:

[T ==[f,] [T/A] [T isal X 1 matrix ofmaxi- -mum time for HM2 ON to occur m1 is a 1 X l function matrix for calculation of l mrur] [T] is a 1 X 1 matrix for time of HMl ON event [A] is a 1 X 1 matrix for measured value of V at HMl ON event T,,,,, T +(EC1) d/V, where EC] is an error constant 1 EC 1 is large enough so that if response event I-IMZ ON signal has not occurred by T it can be reasonably assumed that hardware failure such as workpiece 24 falling off the table TABLE 1 has occurred.

[T [f [T/A] [T,,,,,,] is a 1 X 1 matrix of mini mum time for HM2 ON signal to occur [f is a 1 X 1 function matrix for calculation of rain] or reducing the above equation to T T (EC2) d/ V, where ECZ is an error constant 1 The error constant EC2 is small enough so that it can be assumed that workpiece 24 cannot reach HM2 be- 5 fore the time T If HM2 ON signal occurs before time T it can then be assumed that l-llVl2 ON signal response event was due to noise or extraneous signal inputs.

[14 [f [T/Z] [A isa l X 1 matrix ofmaximum metal velocity at I-IM2 on [)3] is a l X l function matrix for calculation of MI] reducing the above equation gives A (EC3)V', where EC3 1 If measured velocity of workpiece S at time of HMZ On signal is greater than A it is assumed that either readings of Vor V' are at fault or workpiece 24 is entering table drives TABLE 1 at a higher than expected velocity. I

[A [12] [T/A] [A isa 1 X 1 matrix ofmetal velocity at HM2 ON Lfl] is a 1 X 1 function matrix for calculation of min] This can be reduced to A,,,,-,, 0 T+ (EC4)V', where EC4 is an error constant 1 If measured velocity at HM2 ON signal is less than A it can be assumed that excessive slippage is occurring on the table drives TABLE 1 or readings of V or V are at fault.

Information storage tables are provided to indicate a reflection of the process operation. For the illustrated example shown in FIG. 1 of a single stand rolling mill having a total of three input events or the specified three functional units, identification numbers 11, 2 and 3 are respectively provided for these three input events as follows:

COMPOSITION OF STORAGE TABLES There are a total of three input events whose ID. numbers are 11, 2, 3 respectively I=l.I-IM1 ON I=2. HM2ON i=3. HM3 ON A. Storage Table For Input Event or Functional Unit 1 Storage Table For Input Event or Functional Unit 2 Table A(2,l) (input variables) 2 two input variables, screw position S and screw reference S SlVAR symbolic designation for screw reference 1 SZVAR symbolic designation for screw position S TABLE A (2,2) (response events) 3 three response events 152 ON, IS]. ON and HM3 ON 5,1,1 pressductor ON 6,1,1 screw position zero-error 7,7,1 HMS ON Table A(2,3) (response variables) y l Force F associated with 152 ON ,FlVAR,l,1 response variable ID. number for force For this example, the LB. number is broken into three number fields l. FlVAR response variable l.D. number 2. 1 the maximum amplitude cheek request 3. l the minimum amplitude check request. Table A(2,4)

1 screw reading S associated with IS ON S2VAR,1,11 response variable 1D. for screw reading S Table A(2,5)

no variables associated with HM3 ON Storage Table For Input Event 3 Table A(3,1)

0 no input variables for input event 3 Table A( 3,2)

1 HM4 ON response event 8,1,1 1D. for response event HM4 ON Table A(3,3)

0 no response variables B. Storage Table For Error Bits TABLE B1 (time errors) Response Event ID. Error Bit No. For Error Bit No. For Max.

Min. Time Error Time Error 4,1,1 I 6 5,1,1 2 7 6,1,1 3 8 7,1,1 4 9 8,1,1 10

TABLE B2 (amplitude errors) Variable 1.D. Bit No. For Min. Bit No. For M'ax. Value Value Error Error S2VAR,1,1 12 16 F1VAR,l,l l3 17 C. Storage Table For Minimum Time Response Values Response Event ID. Calculated T m" 5,1,1 T,,,,,, 6,1,1 T111111 1 1 T111111 .1. m.

values calculated by predictive equation Tables C,D,E A; F contain values for response events and variables for which the response event has not yet occurred and the maximum time has not elapsed D. Storage Table For Maximum Amplitude Values of Response Variables Response Event ID. Associated Variable Calculated A Value -Continued 5,1,1 Fl Var,1,1 v Am, calculated .1. Z RJJ A values E. Storage Table For Minimum Amplitude Values of Response Variables Response Event l.D. Associated Variable Calculated A,,,,, Value 1.1). 5,1,1 FlVAR, 1, Am, calculated 6,1,1 S2VAR,1,1 A values P. Time Delay Table Bit No. For Max. Response Event l.D. T Values Time Error No.

6 4,1,1 Tm. (calculated varaaii 7v 5,1,1 mar 8 6,1,1 more STORED ERROR MESSAGES ON MASS MEMORY Bit No. Possible Error Message Min. Min. Min. Min. Min. Max. Max. Max.

Relative to the above tables for input event 1 of functional unit 1, it can be seen that there are no input variables shown in the storage table A( 1,1 which is one of the permanent storage tables for input event 1. In other words, no input variables are assocated with input event 1. The response events storage table A( 1,2)

, for input event 1 would contain 1 in its first location to show the number of response events is one. This is the HM2 ON response event, which has stored in core memory the identification member 4,1,1 for response event HM2 ON interrupt, which is arbitrarily chosen and designates which T and T checks are to be made as folows:

For the example of the response ID. number 4,1,1, broken into three number fields, 4 is the 1D. number for the IIM2 ON response event, the first l is the maximum time check request. The second 1 is the minimum time check request. For the response variables storage tables A(1,3 there is shown as zero in the first location showing that for the first input event 1 there are no response variables for the l-IM2 ON response event.

The storage tables for the second input event 2 of functional unit 2 would be as follows for the input variables, in the first location of the table A(2,l the 2 indicates the number of input variables, which are the screw position S and a screw reference 8,. SlVAR is a symbolic designation for the screw reference S to in dicate the address location for this input variable. This is the address to locate it in the memory core. S2VAR is a symbolic designation for the screw position S Relative to the response events for input event 2, the storage table A(2,2) would include the number 3 in its first location to indicate three response events IS ON, IS, ON and HM3 ON. The first response event identification number would be 5,1,1, to indicate the load cell on interrupt signal IS showing that a T and a T,,,,-,, check must be made. The second response event identification number would be 6,1,1 for the zero error position ON interrupt signal IS, showing that T and T,,,,-,, checks are to be made. The third response event identification number would be 7,1,1, to indicate that the hot metal detector I-IM3 ON interrupt signal requires that T and T checks be made.

Relative to the response variables for the second input event 2 storage table A(2,3) for the force signal F the number 1 in first storage location would indicate there is one variable associated with the response event interrupt signal 18 andthis variable has a symbolic designation F lVAR,1,l which is the address identification number for the storage location of the force reading F and indicates that an A and A check are to be made.

The storage table A(2,4) for the screw position S signal at the time of the zero error on interrupt signal IS the number 1 in first storage location would indicate one variable, namely the screw reading S associated with the 1S ON interrupt signal, and this variable has the address symbolic designation S2VAR,l,l which is the address identification number for the actual screw position feedback signal which is read upon the occurrence of screw position zero error and indicates that an A and A check are to be made.

Storage table A(2,5) corresponding to the hot metal detector HM3 ON interrupt signal, the number indicates there are no response variables associated with the HM3 ON interrupt signal.

Storage table'B contains the total number of error bits corresponding to the maximum and minimum time and amplitude errors for the response events and the response variables. Table Bl contains three columns in this example, each column containing five numbers. The first column includes the response event I.D. numbers. The second column includes the bit numbers for the minimum time errors for the response events. The third column contains thebit numbers for the maximum time errors for the response events. The first column of table B2 contains the variable identification numbers. The second column contains the bit numbers corresponding to the minimum amplitude errors for the response variables. The third column contains the bit numbers for the maximum amplitude errors. Each col umn has two elements in this example corresponding to the screw position reading and the force reading. Storage table C is the table for the minimum time response values. It has two columns the response event identification numbers and the calculated minimum Storage table D contains the storage for the minimum amplitude values for the response variables. These minimum values are calculated at the time for the associated input event. The storage table is broken up into three columns. The first column being the ID. number for the response event, the second column being the ID. number for the associated variable, and the third column being the calculated minimum value for this variable. Storage table D in this example has a maximum of two elements corresponding to screw position and force feedback reading.

Storage table E contains the temporary storage for the minimum values of the response variables. This table is also borken into three columns. The first column is the response event ID. number, the second column is the ID. number of the associated variable, and the third column is the calculated minimum amplitude values for the associated variables. Storage table E contains two elements corresponding to the screw position and force feedback reading.

Table F, the time delay table, contains three columns. The first column contains the bit error number for the maximum time error for a functional unit which has had an input event and which has not had a corresponding response event and for which the maximum time has not expired. The second column contains the response event ID. number for the response event. The third column contains the calculated maximum time values for these response events which were calculated at the time of the corresponding input event. In this example, table F shows a maximum of five elements corresponding to the five possible response events. Following this is shown a list of all the possible error messages stored on mass memory. The first column is the bit number or the unique error message identification number, and the second column is the error message stored on mass memory corresponding to this bit identification number.

EXPLANATION OF ERROR MONITOR PROGRAM The error monitor program is divided into four distinct subprograms:

1. An input event program which runs in response to the occurrence of an input event (FIGS. 3, 4, and 5) as a subroutine from application program;

2. A response event which runs in response to the occurrence of a response event (FIGS. 6 and 7) as a subroutine from application program;

3. A time delay program which runs asynchronously with subprograms 1 and 2 as determined periodically by a time clock within the computer (FIG. 8); and

4. An error message output program which runs asynchronously with subprograms 1 and 2 as determined by a time clock periodically (FIG. 9).

In FIGS. 3, 4, and 5 are shown the flow charts for the input event program called as a subroutine by a program which runs in response to the occurrence of an input event. The input event program establishes the T and T time bound checks for the total number of response events associated with a given input event. The application program, which could be an automatic workpiece thickness control program in accordance with the descriptions of the above referenced publications for example or any other process operation application control program as well known to persons skilled in this art, supplies an input event identification 

1. In industrial process operation monitoring apparatus including a programmed digital computer and responsive to the occurrence of at least one sequential process event in relation to a predetermined functional unit, with each said functional unit having at least one defined input event and at least one related response event, that combination of means operative with said industrial process for providing a first input signal in response to the occurrence of said one input event of a given functional unit, means operative with said industrial process for providing a second input signal in response to the occurrence of said one response event for said given functional unit, and means including said programmed digital computer for establishing the desired operational maximum and minimum limits relative to a predetermined value parameter for each response event related to said input event and for providing a predetermined output signal related to the operation of said industrial process when said one response event was not within said desired operational limits.
 2. The industrial process operation monitoring apparatus of claim 1, with said means including said programmed digital computer being operative to establish desired operational maximum time limit Tmax and minimum time limit Tmin relative to the sensed occurrence time of said second input signal related to said input event, and with said means including said programmed digital computer being operative to compare the sensed occurrence time of said second input signal with said established limits Tmax and Tmin to determine that said one response event was within said desired operational limits.
 3. The indUstrial process operation monitoring apparatus of claim 1, with said means including said programmed digital computer establishing the desired operational maximum time limit Tmax and minimum time limit Tmin relative to a predetermined occurrence time To + Delta T for each response event related to the occurrence time To of said input event and where Delta T is a predetermined time delay between said time To and the occurrence time of each said response event.
 4. The industrial process operation monitoring apparatus of claim 1, with said means including said programmed digital computer establishing the desired operational maximum time limit Tmax and minimum time limit Tmin relative to a predetermined time value parameter for each response event related to said input event, and with said means including said programmed digital computer comparing said time value parameter with said limits Tmax and Tmin for determining that each said response event was within said desired operational limits.
 5. The industrial process operation monitoring apparatus of claim 1, with said means for providing a predetermined output signal being operative to request a predetermined error indication message be provided when said response event was not within said desired operational limits.
 6. In apparatus for monitoring a dynamic industrial process including at least one predetermined unit of sequentially operative happenings, means operative with said industrial process for providing a first input signal in response to a first of said happenings within each said one unit, means operative with said industrial process for providing a second input signal in response to at least one second happening within said one unit and related to a first happening within the same unit, and means for establishing a desired predictive relationship between said first happening and said second happening within said one unit and responsive to the provision of said first input signal and said second input signal for providing an output signal in response to said first input signal and in relation to said desired predictive relationship.
 7. The apparatus for monitoring a dynamic industrial process of claim 6, with said means for establishing a desired predictive relationship being responsive to a defined input event as said first happening within each said unit for establishing a desired predictive relationship with at least one defined response event as said second happening within that same unit, and with said predictive relationship being in regard to the time occurrence of said first input signal in relation to said input event and the time occurrence of said second input signal in relation to said response event.
 8. The apparatus for monitoring a dynamic industrial process of claim 6, with said means for establishing a desired predictive relationship being operative to make an amplitude comparison in relation to at least one second happening within that same unit, where the amplitude of that second happening is compared to a predetermined reference amplitude for that second happening.
 9. The apparatus for monitoring a dynamic industrial process of claim 6, with said means for establishing a desired predictive relationship being responsive to the occurrence time To of a defined input event as said first happening and establishing a desired predictive relationship To + Delta T with at least one second happening within that same unit, where that second happening is a defined response event associated with said input event and predicted to occur relative to said input event after a time delay Delta T.
 10. In a method of monitoring the operation of a dynamic industrial process including a plurality of defined units of sequential events, the steps of providing a first input signal upon the occurrence of a first of said events, providing a second input signAl upon the occurrence of a second of said events, establishing a predetermined predictive relationship between said first event and at least said second said event within that same defined unit of events, requesting the provision of an output signal indication for each said unit in response to said first of said events and in relation to the satisfaction of said predictive relationship, and establishing for at least said second event within each unit of events that said predictive relationship is satisfied for preventing the provision of said output signal indication when said predictive relationship is satisfied.
 11. The method of monitoring the operation of a dynamic industrial process of claim 10, with said step of establishing a predetermined predictive relationship being operative to establish a first time interval between the occurrence of said first of said events and the predicted occurrence of said second of said events, with said step of establishing that said predictive relationship is satisfied being operative to establish a second time interval between the occurrence of said first of said events and the actual occurrence of said second of said events, and with said step of requesting the provision of an output signal indication being operative to prevent the provision of an output signal indication of a determined error condition in the operation of said dynamic process when said predictive relationship is satisfied by a comparison of the first time interval with the second time interval.
 12. The method of monitoring the operation of a dynamic industrial process of claim 10, with said step of establishing a predetermined predictive relationship being operative to establish in regard to the occurrence time of said first input signal a predictive relationship in regard to the occurrence time of said second input signal within the same defined unit of events.
 13. The method of monitoring the operation of a dynamic industrial process of claim 10, including a plurality of defined units of sequential events, with said step of establishing for at least said second event within each unit of events a comparison of the said predictive relationship with the occurrence time of said second input signal in relation to said second event to determine that said predictive relationship is satisfied by that occurrence time being within said predictive relationship.
 14. The method of monitoring the operation of a dynamic industrial process of claim 10, with said step of requesting the provision of an output signal indication being operative to request a process operation error output signal indication and to determine the actual provision of said error output signal indication when a predetermined characteristic of at least said second event within each unit of events does not occur in a desired manner to satisfy said predictive relationship.
 15. In the method of monitoring the operation of a dynamic industrial process having a plurality of defined units, with each said unit including first and second related events and with said second event having a measurable variable, the steps of providing a first input signal in relation to the sensed occurrence of said first event for each said unit, measuring the value of said variable, requesting the provision of an output signal indication for each said unit in response to said first input signal, establishing the operational limits of a predictive value for said measured variable of said second event in relation to the occurrence of said first event for each said unit, establishing the relationship between the measured value of said variable and said operational limits of said predictive value to determine when said measured value is within said operational limits, and providing an output signal indication for each said unit in relation to said measured value being within said operational limits.
 16. The method of monitoring the operation of a dYnamic industrial process of claim 15, said method including the steps of, providing a second input signal in relation to the sensed occurrence of said second event for each said unit, determining a time interval between the occurrence of said first input signal and the occurrence of said second input signal, and providing said output signal indication of an error condition in the operation of said dynamic process only when said time interval has a predetermined difference in comparison with at least one of established operational maximum and minimum time limits.
 17. The method of monitoring the operation of a dynamic industrial process of claim 15, with said step of establishing the operational limits of a predictive value for said measured variable being operative to establish operational amplitude limits relative to the amplitude value of said variable.
 18. The method of monitoring the operation of a dynamic industrial process of claim 15, with the step of establishing the operational limits being operative to establish operation amplitude limits of at least one of the maximum amplitude limit and the minimum amplitude limit, and with said step of requesting the provision of an output signal indication being operative to provide said output signal indication only when the amplitude of said measured variable is not within at least one of said operational amplitude limits.
 19. The method of monitoring the operation of a dynamic industrial process of claim 15, with said step of establishing the operational limits being operative to predictively specify the amplitude value limits for said measured variable, and with said step of requesting the provision of an output signal indication being operative to compare the actual amplitude value of said measured variable with the predictively specified amplitude value limits to determine the provision of said indication.
 20. An operation monitoring apparatus for a dynamic industrial process having a plurality of functional units, with each functional unit including at least one response event associated with an input event, said monitoring apparatus comprising, means for providing a first input signal in relation to said input event, means for providing a second input signal in relation to one response event, means for determining for each said functional unit a time delay interval between the occurrence of said second input signal related to said one response event after the occurrence of said first input signal related to said input event, means for comparing for each said functional unit said time delay interval with at least one of a predetermined maximum time interval Tmax and a predetermined minimum time interval Tmin, and means for providing an error condition output signal indication for a detected error condition for at least one said functional unit when the time delay interval is one of greater than a predetermined maximum time interval and less than a predetermined minimum time interval.
 21. The operation monitoring apparatus for a dynamic industrial process of claim 20, with said means for providing an error condition output signal indication being operative to correct the operation of said dynamic process relative to said detected error condition.
 22. The operation monitoring apparatus for a dynamic industrial process of claim 20, said monitor apparatus including means for requesting that a predetermined error message be displayed in relation to said output signal indication at a predetermined time if said means for comparing establishes that the time delay interval is one of greater than said maximum time interval or less than said minimum time interval.
 23. The operation monitoring apparatus for a dynamic industrial process of claim 20, with said means for providing an error condition output signal indication being operative when the desired sequence of the occurrence of said events is not followed due to tHe failure of said response event to occur as desired.
 24. The operation monitoring apparatus of claim 20, with said monitoring apparatus including, means for determining a first time T1 when at least said first input signal in relation to said input event occurs, means for determining a second time T2 when at least said second input signal in relation to said one response event occurs, and with said means for determining for each said functional unit a time delay interval being operative with said first time T1 and said second time T2.
 25. The operation monitoring apparatus of claim 24, with said means for determining for each said functional unit a time delay interval being operative to establish a time delay interval Delta T in accordance with the relationship T2 - T1 Delta T.
 26. The operation monitoring apparatus of claim 25, said monitoring apparatus including, means for comparing said time delay interval Delta T with at least one of a predetermined maximum time limit or a minimum time limit to establish that said error condition is present.
 27. The operation monitoring apparatus of claim 20, said monitoring apparatus including means for determining for each said functional unit the amplitude of at least said second input signal related to said one response event, and means for comparing for each said functional unit said amplitude with predetermined amplitude limits to establish that an operational error condition is present.
 28. A monitor apparatus for a dynamic industrial process operative in a plurality of functional units, with each of said units having an input event and at least one associated response event, said apparatus comprising, means for providing for each functional unit a first input signal in relation to said input event, means for providing for each functional unit a second input signal in relation to said one response event, means for determining for each functional unit a first time interval between the occurrence of said first input signal related to said input event and the actual occurrence of at least said second input signal related to said one response event associated with that input event, means for establishing for each functional unit at least a second time interval in accordance with a desired relationship between the occurrence of said first input signal related to said input event and the desired occurrence of at least said second input signal related to said one response event associated with that input event, and means for providing for each functional unit an output signal indication of a predetermined error condition relative to the operation of said dynamic process, with said error condition being determined by said first time interval being one of greater than said second time interval or less than said second time interval.
 29. The monitor apparatus for a dynamic industrial process of claim 28, with said means for establishing at least a second time interval being operative to establish one of a maximum time interval or a minimum time interval, and with said means for providing an output signal indication of a predetermined error condition being operative to determine said error condition when said first time interval is one of greater than the maximum time interval or less than the minimum time interval.
 30. A method of monitoring a dynamic industrial process operative in at least one functional unit, with said one unit having an input event and at least one associated response event, said method including the steps of, providing a first input signal in relation to said input event, providing a second input signal in relation to said one associated response event, establishing a comparison for said functional unit for each response event between said first and second input signals in regard to at least one of a predetermined maximum time interval and a predetermined Minimum time interval, determining an error condition for said functional unit in the operation of said dynamic process by said comparison when the time delay interval between the occurrence of said input event and said resonse event is one of greater than said maximum time interval or less than said minimum time interval, and providing an output signal indication for said functional unit of a determined error condition when said error condition has been determined to have occurred.
 31. The method of monitoring a dynamic industrial process of claim 30, with said functional unit having at least one response variable associated with each response event and with the amplitude of said second input signal being related to the amplitude of said one response variable, said method including the steps of, establishing a second comparison for said functional unit for each response variable in regard to at least one of a predetermined maximum amplitude and a predetermined minimum amplitude of said second input signal, determining a second error condition for said functional unit in the operation of said dynamic process by said second comparison when the amplitude of said second input signal is one of greater than said maximum amplitude or less than said minimum amplitude, and providing for an output signal indication for said functional unit of a determined error condition when one of said error conditions has been determined to have occurred.
 32. The method of monitoring a dynamic industrial process of claim 30, with said step of establishing a comparison for each response event being in regard to at least one of a maximum time interval Tmax and a minimum time interval Tmin relative to said time delay interval between the occurrence of each said response event after the occurrence of said input event.
 33. A method of monitoring the operation of a dynamic industrial process having at least one defined functional unit, with said functional unit including an input event and an associated response event, said method comprising the steps of, sensing the occurrence time of said input event, sensing the occurrence time of said associated response event, determining for said functional unit at least one time delay for comparison with at least one of a maximum time interval and a minimum time interval between the occurrence time of said input event followed by the occurrence time of said response event, requesting for said functional unit a process operation error output signal indication to be provided, and comparing for said functional unit said time delay with at least one of said maximum time interval and said minimum time interval to control the provision of said requested error output signal indication.
 34. The method of monitoring the operation of a dynamic industrial process of claim 33, with said input event occurring at time To and with said step of determining at least one time delay being in accordance with a desired relationship To + Delta T between input event time To and the time delay interval Delta T between the occurrence time of said input event followed by the occurrence time of said response event.
 35. The method of monitoring the operation of a dynamic industrial process of claim 33, with said step of determining at least one time delay being in accordance with at least one of a maximum time interval limit Tmax and a minimum time interval limit Tmin, respectively, and where To is the occurrence time of the input event and Delta T is the desired time interval between the occurrence time of said input event and the occurrence time of said response event.
 36. The method of monitoring the operation of a dynamic industrial process of claim 33, with said step of determining at least one time delay being operative to predict a desired relationship between the occurrence time of said input event followed by the occurrence time of said response event, and including the step of determining for said functional unit at least one second time delay in accordance with the relationship between the actual occurrence time of said input event followed by the actual time occurrence of said response event, and with said step of comparing being operative to compare the respective time delays to control the provision of said requested error output signal indication. 